
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/1b40ff-b1e1-4951-9165-23bb39a83481/1/Rjh8VrMx_4S8ENiskOHiwW8XI0U.mft
File: Rjh8VrMx_4S8ENiskOHiwW8XI0U.mft (raw, json)
Hash identifier: wChtyWyp9M54fYA6/qDX4HJ4ffIRXrqrl+aUJAd9T7c=
Subject key identifier: 4D:D9:0E:A1:51:60:0F:CB:4F:89:A5:AB:86:A0:62:76:2B:F0:30:79
Authority key identifier: 46:38:7C:56:B3:31:FF:84:BC:10:D8:AC:90:E1:E2:C1:6F:17:23:45
Certificate issuer: /CN=46387c56b331ff84bc10d8ac90e1e2c16f172345
Certificate serial: 01975F81CAC43B68F929E6D64AD0F74CACE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rjh8VrMx_4S8ENiskOHiwW8XI0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/1b40ff-b1e1-4951-9165-23bb39a83481/1/Rjh8VrMx_4S8ENiskOHiwW8XI0U.mft
Manifest number: 1589
Signing time: Wed 11 Jun 2025 15:00:30 +0000
Manifest this update: Wed 11 Jun 2025 15:00:30 +0000
Manifest next update: Thu 12 Jun 2025 15:00:30 +0000
Files and hashes: 1: Rjh8VrMx_4S8ENiskOHiwW8XI0U.crl (hash: M7BFjIW0/2aMqOf+c9frfIP5VniG1SmQo1s0KF/LWCE=)
2: xAHFWshzCwZ9iWzPHD319yAWavE.roa (hash: LAjKykzMh8QraV6MgCdF6nP15mOVTD1M9V0STezqNjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/1b40ff-b1e1-4951-9165-23bb39a83481/1/Rjh8VrMx_4S8ENiskOHiwW8XI0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/1b40ff-b1e1-4951-9165-23bb39a83481/1/Rjh8VrMx_4S8ENiskOHiwW8XI0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rjh8VrMx_4S8ENiskOHiwW8XI0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 15:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5f:81:ca:c4:3b:68:f9:29:e6:d6:4a:d0:f7:4c:ac:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46387c56b331ff84bc10d8ac90e1e2c16f172345
Validity
Not Before: Jun 11 15:00:30 2025 GMT
Not After : Jun 12 15:00:30 2025 GMT
Subject: CN=4dd90ea151600fcb4f89a5ab86a062762bf03079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:17:20:f5:53:d2:15:fc:a3:dd:da:9d:91:93:
cc:5a:0a:76:25:e2:34:9f:6c:08:31:81:26:ae:21:
8c:fd:36:9b:ac:1d:6e:f4:70:de:f7:39:1d:82:7e:
02:db:b9:71:06:b5:82:42:6d:45:fc:39:b7:de:8d:
21:a5:8c:f2:34:42:84:fb:31:ca:12:84:df:2d:89:
f7:02:08:67:69:42:ff:ba:a8:c1:ed:3d:08:60:e8:
01:a2:f4:46:2f:4d:11:ab:3a:0f:be:10:60:83:ab:
02:93:21:8a:54:b2:93:ba:46:bd:16:ec:e2:cd:8f:
92:d3:25:32:08:fe:0e:22:dc:ad:19:e0:33:dc:6f:
bf:6c:5c:62:83:a0:9c:73:e6:06:d7:23:ce:6e:bd:
eb:9f:d9:b1:34:94:6c:cc:6b:b6:24:f7:6b:44:88:
dc:db:b7:3f:76:99:31:1a:f3:a9:f9:6e:8d:de:79:
d9:e1:c4:f3:28:10:a4:61:ef:a6:14:19:62:cc:c6:
54:84:cd:26:27:66:be:3a:78:9e:46:35:7b:65:cc:
ce:9f:7d:63:14:b5:cb:a3:c7:9f:dc:56:73:ad:c0:
4a:0c:2e:f1:68:e4:9c:1a:18:a9:3c:55:b7:d1:96:
a5:a4:58:54:60:a4:b5:52:2e:d9:86:b1:f0:f2:b0:
59:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:D9:0E:A1:51:60:0F:CB:4F:89:A5:AB:86:A0:62:76:2B:F0:30:79
X509v3 Authority Key Identifier:
keyid:46:38:7C:56:B3:31:FF:84:BC:10:D8:AC:90:E1:E2:C1:6F:17:23:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rjh8VrMx_4S8ENiskOHiwW8XI0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1b40ff-b1e1-4951-9165-23bb39a83481/1/Rjh8VrMx_4S8ENiskOHiwW8XI0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1b40ff-b1e1-4951-9165-23bb39a83481/1/Rjh8VrMx_4S8ENiskOHiwW8XI0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:7e:b2:9e:a5:c0:78:9e:9b:dd:f8:75:eb:de:0e:fb:42:d8:
da:be:48:73:02:fc:52:f6:22:ff:90:56:7b:28:c7:c1:7b:e7:
a5:46:99:a2:e1:67:d9:fb:2f:a7:d3:e4:ae:c5:2b:92:61:b9:
1b:07:a2:3d:73:36:15:e8:ed:91:07:2f:ad:35:6c:70:b9:bd:
9e:f6:3e:40:8e:79:a5:e1:7b:6c:a0:08:af:8a:e4:f1:48:3e:
fa:0f:72:17:03:43:9c:ba:99:6b:7a:e5:66:6e:4b:7a:4f:cf:
5e:a6:af:8f:16:bc:9b:35:d4:db:7c:98:55:9f:4e:ee:9d:19:
ec:d3:15:48:cf:c0:c6:cc:e3:e1:aa:b4:69:e7:c4:10:0e:05:
f6:35:a8:04:d7:77:d8:9a:48:63:2d:f9:8c:57:d3:6c:65:c7:
5d:f5:05:b6:c9:4f:93:17:d6:c3:ef:30:92:ec:dd:d6:23:9e:
4b:6a:86:04:67:c3:cb:15:bb:22:45:06:c7:bd:1b:7e:3b:7f:
a2:e2:22:dc:d3:41:92:43:6a:42:bf:2a:2e:4b:b6:2b:10:12:
da:b6:bb:27:30:b3:4d:d3:18:07:ba:db:c5:69:fd:32:f2:f9:
13:ec:0b:cd:9a:c7:33:98:5c:fe:55:f1:38:41:42:6a:ef:c7:
9e:32:d3:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 22:57:59 2025 by rpki-client